I would suggest going over the blog on custom detectors:

https://blog.snort.org/2014/06/openappid-training-videos-how-to-create.html

 

Also depending on what patterns this application has they may be clear enough to create your own custom detector using the appid_detector_builder.sh script under snort/tools/ opensource folders.

 

Thanks

Costas

 

From: Snort-openappid <snort-openappid-bounces@lists.snort.org> on behalf of RECIMERO CESAR Fabre via Snort-openappid <snort-openappid@lists.snort.org>
Reply-To: RECIMERO CESAR Fabre <cesar.fabre@hc.fm.usp.br>
Date: Friday, May 25, 2018 at 3:00 PM
To: "snort-openappid@lists.snort.org" <snort-openappid@lists.snort.org>
Subject: [Snort-openappid] Add globoplay on openappid rule set

 

Hi guys,
The "globoplay" is not on the default openappid list. How do I add it.
 
Thanks a lot!
 


 

--

************************************
C├ęsar Fabre, MSc
NETI-HCFMUSP | CIS
Telefone: (11) 2661-6018